
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
File: pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json)
Hash identifier: BPhB5q78wg7yiK8Hq3Z+jP8Cy3JG2LUJiFu8XxEBqBA=
Subject key identifier: D7:59:E0:3E:05:6D:83:F5:21:64:7B:E3:78:4C:4D:99:44:3B:BB:FE
Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Certificate issuer: /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Certificate serial: 01984A09E4D0063A2A1FADA06131A3331A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
Manifest number: 1595
Signing time: Sun 27 Jul 2025 04:00:19 +0000
Manifest this update: Sun 27 Jul 2025 04:00:19 +0000
Manifest next update: Mon 28 Jul 2025 04:00:19 +0000
Files and hashes: 1: LnuT6eEdb88-TghvQ_FZnRefVyk.roa (hash: XQk1e8dAGrgYT1azOGp5hpmR57maWf6UhLO79IbQj1k=)
2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: EJfgCUy2wHQqbSVHcbqHS6/t+1g/Bbuso8FIIZAnew4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:e4:d0:06:3a:2a:1f:ad:a0:61:31:a3:33:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Validity
Not Before: Jul 27 04:00:19 2025 GMT
Not After : Jul 28 04:00:19 2025 GMT
Subject: CN=d759e03e056d83f521647be3784c4d99443bbbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:5f:f1:f6:f9:24:bc:2f:26:2a:f1:35:ad:
54:51:ae:d1:5e:0c:eb:da:0f:ed:4d:9e:22:70:0b:
1f:01:8c:25:53:f2:3e:d7:81:8d:6f:3a:14:7c:52:
36:1d:fd:36:58:31:62:e3:cd:f0:ad:7d:49:b7:48:
55:e1:26:86:6b:68:04:e1:88:2c:78:1b:24:d7:c5:
4a:31:9f:56:13:ba:a8:f5:b8:91:e3:ba:fd:80:0f:
d9:d2:f7:6b:0a:d5:1e:3f:43:9a:2d:8c:1a:98:fc:
88:ac:31:49:c2:43:e3:10:c9:4c:59:22:c6:e3:36:
85:32:dc:ea:0f:bd:e3:14:18:73:59:69:2b:4d:f4:
58:75:c6:24:6c:d7:4a:24:18:6b:a6:ba:fc:cf:eb:
ee:df:da:37:bc:51:d8:1b:bf:f7:07:a0:69:0a:d9:
b9:c7:d8:a9:3f:3b:fe:70:fd:d6:e9:61:a8:3f:13:
fe:34:75:54:65:58:1a:71:30:a5:38:d3:55:bd:26:
5d:8a:85:59:a7:94:91:87:61:8a:70:b4:3c:28:cd:
28:6b:02:8d:97:1c:22:68:ff:8a:d9:52:a2:48:86:
c4:01:37:dd:02:91:5c:1a:4e:3d:20:08:92:c9:46:
9b:a6:b9:24:9b:e8:be:68:f6:b6:08:dd:e1:c3:00:
00:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:59:E0:3E:05:6D:83:F5:21:64:7B:E3:78:4C:4D:99:44:3B:BB:FE
X509v3 Authority Key Identifier:
keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1c:1d:c3:6f:68:4d:a9:65:cb:6a:52:55:58:c5:a3:c8:e7:
27:d0:ee:d2:4f:b4:dd:8b:46:95:b0:28:ba:7b:99:e1:ca:2c:
6f:f0:62:85:f0:70:00:aa:22:75:84:02:78:9c:37:f4:16:77:
0a:aa:f7:cc:5b:c9:0d:b2:b2:64:b6:a9:32:59:cc:10:54:e0:
a9:81:75:5e:03:41:f5:82:71:33:57:b3:53:2d:41:da:37:49:
c9:aa:54:50:68:99:ef:86:69:f2:3f:45:28:4b:5c:db:e2:69:
6d:db:ac:89:cc:e5:fd:b4:9f:9d:7e:58:6a:69:a9:1c:e8:99:
0a:a7:f0:56:3f:db:8e:4f:4c:dd:8b:05:28:0e:62:c5:3c:29:
84:ac:ee:1d:29:be:aa:e0:d5:e2:ff:dc:da:dd:af:60:ac:03:
46:4e:f0:31:65:07:2b:8a:be:59:f3:54:e2:e9:56:c9:c6:35:
54:67:0e:e3:36:46:75:9e:95:c8:fd:75:44:fd:37:da:89:6f:
9b:75:7d:0c:e0:10:80:00:1a:91:21:0d:c6:b0:bf:f1:31:67:
2d:d3:bb:8a:d2:e5:bc:78:c4:e9:87:fb:f2:a6:e9:f4:c5:91:
b4:9c:b1:f4:30:5d:66:4c:8b:43:4e:b0:14:b6:bc:45:bd:47:
5f:7c:56:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:42 2025 by rpki-client